Hawaii: Inspiring the Next Generation of Cybersecurity Experts

Hawaii: Inspiring the next generation of cybersecurity experts

A report detailing Hawaii’s leadership in finding, motivating, and developing the cyber-capable workforce in the United States. Dear Governor Ige,

Your insight and leadership in bringing CyberStart to the students of Hawaii is already paying dividends for them in the form of learning and scholarships, and it can lead to future job growth and improved cybersecurity in Hawaii. Results of the CyberStart pilot program, ably managed by Reynold Hioki, Cybersecurity Manager for your Department of Defense, with help from Arnold Kishi and IT and security leaders at the University of Hawaii, are summarized below. But before you dig into the numbers and see the lists of high-performing Hawaii students, please turn to the last page and back cover of this booklet to enjoy personal notes that participating students wrote specifically for you.

Program Highlights:

• In just two weeks in July, your communications team was able to sign up 317 Hawaii students. students initially registered to see how well they could do • 78% of them solved at least one of the assessment challenges and 51% solved enough 317 on CyberStart Assess, the program’s qualifying exam. to be invited to test their cyber aptitude on the 250+ challenges of the full CyberStart program, which they did during August 2017. At the same time your fellow governors in six states signed up a total of nearly 3,300 students. students got one or more answers correct • Eight Hawaii high school and college students were in the overall top 50 nationally, and in CyberStart Assess. 22 Hawaiian students won scholarships for more advanced education in cybersecurity. 248 Of special note is that Hawaii had a far larger number of high scorers and scholarship winners on a per capita basis than any of the other states. • The state of Hawaii excelled in the program, being above average in all topics covered. students qualified for the Topics included: Linux, web application, forensics, cryptography and programming. 51% CyberStart Game. • As you might guess from the students’ notes, they liked CyberStart: 161 95% said they would recommend the program to a friend 98% are considering further cybersecurity training after the program students reached the elite levels (7+) in the HQ Please let me know if there is anything I can do to help as you continue to identify talent and 40 base of the program. grow the next generation of cybersecurity experts in Hawaii.

Sincerely, Alan Paller Scholarships 22 SANS Institute Director of Research [email protected] Hawaii’s next cybersecurity professionals. Program Introduction What Do Players Learn? CyberStart is a forward-thinking skills program designed to supply specialist cybersecurity The CyberStart Game has over 300 hours of content and covers 14 main topic areas. There education to young people across the United States. Using a suite of online challenges, are two “bases” that make up the game, each containing several levels and challenges that tools and games it aims to inspire the next generation of cybersecurity professionals while candidates move through: the Headquarters Base and the Moon Base. identifying the best and most talented young Americans. We are facing a significant shortage of trained and skilled cybersecurity professionals at a Bases time when online technologies continue to evolve, and cybercriminals are becoming more sophisticated. The only way to solve this problem is to introduce, develop and help young The Headquarters Base forms the main part The Moon Base is where players learn how people in high school and college pursue a career in this sector. of the game. Players take on the role of a to program. Players go through a series of junior agent in the Cyber Protection Agency, challenges, building up progressively, to Phases where they deploy their forensics and write their own programs in Python. The offensive skills to sleuth through challenges aim of the Moon Base is for players to use all CyberStart Assess is a set of 8 questions CyberStart Game is where students and tackle various online cyber criminal the skills they have learned to stop an alien that test a student’s aptitude and existing become exposed to specialist cybersecurity gangs. As they work their way up through the invasion. The Moon Base has three training knowledge of computer security. Based on education. Using a suite of online tools, organization, their training develops each of levels that are step by step guides to the identifiable, measurable key skills and traits, challenges and games, players attempt to the security disciplines. basics of programming. it works to find young people who possess solve more than 250 challenges, all of which The HQ Base teaches students skills in: Later levels teach students skills in: the innate qualities of an effective security are realistic examples of tests and threats practitioner. Questions look for traits such faced by practicing cybersecurity engineers • Binary • Programming cryptography as problem solving, logical extrapolation and in their day-to-day lives. The CyberStart • Cryptography • Debugging attention to detail, all of which have been Game enables students to start studying proven to be crucial to succeed in a security security with challenges written by experts • Forensics • Files career. who practice these skills in the real world. • Linux • Functions Goals • Open-source intelligence • Loops • Programming • Sockets • Supply specialist cybersecurity education • Inspire the next generation of • Web application • Strings for 16+year olds. cybersecurity experts. • Grow the U.S. cyber capable workforce. • Identify the most elite young talent. Top 100/ CyberStart Players in Hawaii Last Name First Name School Scholarship Chun Lauren Sacred Hearts Academy Key Cobbs Justin University of Hawaii, West Oahu ** In the top 100 and awarded a scholarship * Awarded a scholarship Decker Dylan Kalani High School ** Dedicatoria Kenneth University of Hawaii, West Oahu DiRienzo Vincent University of Hawaii ** Top 100/ Last Name First Name School Scholarship Domingo Joshua University of Hawaii, Manoa Agarano Joshua University of Hawaii, Maui Domingo Warren University of Hawaii, Manoa Ahloo Sean Kapiolani Community College Dossey Stephen University of Maryland University College Alvarez Jeffrey Leeward Community College Drumeller Michael Kapiolani Community College Amandin Chyba Homeschool Rabeendran Eshelman Ian Mililani High School Antiado Carl H.P. Baldwin High School Evans Janice University of Hawaii, West Oahu Arnobit Aiyana Noelle Sacred Hearts Academy Goo Tallas University of Hawaii, Manoa Barrar David Homeschool Graham James Kapiolani Community College Bay Christian Kapiolani Community College Grayson Oliver Hawaii Preparatory Academy ** Bolibol Mark Jonel Honolulu Community College H Dan Homeschool Borgonia Lyndon Leeward Community College Hayworth Jayson University of Hawaii, West Oahu Boyce Kainoa Northern Arizona University Hellum Addison Myron B. Thompson Academy Briggles Bryce University of Hawaii, West Oahu Higashionna Ryan Assets High School Buenafe Marvin Arnold University of Hawaii, West Oahu ** Ho Ky University of Hawaii, Manoa Chan Philip University of Hawaii Hom Scott Universit of Hawaii, Manoa Horiuchi Nathan Honolulu Community College ** Chang Edward University of Hawaii ** Ito Elliot University of Hawaii, Manoa Chen Wendy University of Hawaii, Manoa Kam Darren Iolani School ** Chiques Jacques Leeward Community College Galarza Kansaki Allen University of Hawaii, West Oahu Chong Tyler University of Hawaii, Manoa ** Kaohi Alexandra University of Hawaii, West Oahu Top 100/ Top 100/ Last Name First Name School Last Name First Name School Scholarship Scholarship Kay Sara Punahou School Nakahodo Dylan University of Hawaii, Manoa ** Kim Brian University of Hawaii, West Oahu Nakamatsu Keith University of Hawaii, Manoa Kitagawa Ryuto Kalani High School Nakashima Cole Punahou School Kobayashi Marco de University of Hawaii, Manoa ** Nakata Ryan University of Hawaii, Manoa * Lannoy Nasca Joseph University of Hawaii, Manoa * Krug Kolton Leeward Community College Nash Monnisa University of Hawaii, Maui Kuakini Robert University of Hawaii, West Oahu * Nitta Kara University of Hawaii, West Oahu Kumar Aditya University of Hawaii, Manoa Oh Courtney Leeward Community College Lau Jaime Kapiolani Community College Okabe Jun University of Hawaii, Manoa Lau Kinaole Mulan Homeschool Palmer Catherine Sacred Hearts Academy Lauw Megan Mililani High School Pang J Leeward Community College Law Evan University of Hawaii, Manoa ** Paul John University of Hawaii, West Oahu Le Duong University of West Oahu * Perry Lily Iolani School Lee Jason Kapiolani Community College Reimer Cameron Pearl City High School Lee Kelly University of Hawaii, Manoa Ryan Kevin University of Hawaii, West Oahu * Levesque Kyle University of Hawaii, Manoa Sarte Catherine University of Hawaii, West Oahu * Li Dan University of Hawaii, Manoa Seki Ryota University of Hawaii, Manoa Lin Helen Sacred Hearts Academy Shaw Nicholas Mililani High School Luke Korry Iolani School * Spain Skyler Hilo High School Mansilungan Rachelle University of Hawaii, West Oahu Stallings Emiley HOCO Matsuda Christelle University of Hawaii Stoycheff Brittany University of Hawaii, West Oahu Matsushima Mele Eastern Gateway Community Taga Max University of Hawaii, Manoa College Takafuji Sean University of Hawaii at Manoa * McCann Jared Homeschool Tay Jason Punahou School ** Miller Robert Hawaii Technology Academy Thai Mindy Sacred Hearts Academy Naito Maile Santa Clara University Topinio Jacob Mililani High School Nakagawa Elton Hawaii Community College Top 100/ Last Name First Name School Strengths & Weaknesses Scholarship Torigoe Jonathan Kapiolani Community College Headquarters Base State average Seven state Difference Torikawa Jason University of Hawaii, West Oahu categories (%) average (%) (%) Uyeda Logan University of Hawaii, Manoa ** Linux 25.04 20.97 19.40 Viloria Rodney- University of Hawaii, Manoa Web application 34.75 30.83 12.68 Jerrome Forensics 32.35 28.03 15.43 Weeks Nathaniel University of Hawaii, West Oahu Binary 11.67 9.21 26.71 Wong Nick Kamehameha Schools Kapalama Cryptography 48.54 44.83 8.23 Yee Brandon Punahou School ** Programming 19.32 16.19 19.34 Young Jason University of Hawaii Open-source 71.43 68.40 4.43 Yuu Ian University of Hawaii intelligence

Alice University of Hawaii, Manoa Moon Base State average Seven state Difference Allen University of Hawaii, West Oahu categories (%) average (%) (%) Angela University of Hawaii, Manoa Cryptography 11.02 8.11 35.84 Ashley Sacred Hearts Academy Debug 25.42 23.53 8.05 Bryan University of Hawaii, West Oahu File 16.44 12.83 28.10 Bryson Honolulu Community College Functions 23.73 22.46 5.65 Chad University of Hawaii, Manoa Loops 11.23 7.4 2 51.34 Chris University of Hawaii, Manoa Sockets 14.94 11.31 32.09 Dennis University of Hawaii, Manoa Strings 9.32 6.55 42.30 Gabriel University of Hawaii, West Oahu Herman University of Hawaii, Manoa Hawaii’s students were above average in every topic in both the Headquarters and Moon Base. This is a very exciting result and shows a wealth of talent that needs to be celebrated in Kea University of Hawaii, Manoa the state. Students were particularly strong at loop and string challenges in the Moon Base. Melvin University of Hawaii Sola Sacred Hearts Academy Student Feedback - Previous Knowledge Student Feedback on CyberStart

A survey sent to everyone who played the CyberStart Game asked players for feedback on The response to the How would you rate your experience of using CyberStart? their previous knowledge, what they had learned, and what they enjoyed most about the tool has shown that the 48% program. 20 training and teaching 18 in CyberStart has These charts demonstrate 16 37% Have you previously participated in a Capture the Flag competition? engaged the instinctive that most students who 14 30 12 ways people learn 63% played the CyberStart 25 Game in Hawaii had never 10 and identified those been exposed to a Capture 8 15% who naturally think 20 6 like a cybersecurity the Flag style teaching 4 15 practitioner. These method. Knowing this, it 2 0% 0% encouraging results 10 is encouraging that 51% of 0 17% Excellent Very good Good Fair Poor reflect the enormous 10% 10% players made it through to 5 the CyberStart Game. success of the program 0 in engaging with a variety This is my first Have done 1-2 CTFs Have done 3-5 CTFs More than 5 CTFs However, players from of ages, genders and skill before before Hawaii did have quite a How likely is it that you would recommend CyberStart to a friend? level. lot of experience in other relevant cybersecurity The students’ response Have you taken any courses in the following subjects? You may Extremley likely 63% subject areas - in to the game has been select more than one answer. exciting: 85% of students particular computer Quite likely 32% rated the game either None of these 16% systems. In comparison to some other states, the Neither likely or unlikely 5% “excellent” or “very good” Robotics 12% talent pool of students and 95% said they would Quite unlikely 0% IT/Computer systems 24% playing CyberStart in recommend the program to a friend. Not a single Networking 18% Hawaii was high, showing Extremley unlikely 0% a strong group of students player rated the game Digital forensics 4% keen to build upon their 0 5 10 15 20 25 30 “fair” or “poor” or said it Cybersecurity 26% existing knowledge. Their was unlikely they would recommend it to a friend. 0 0.2 0.4 0.6 0.8 1 engagement with the tool is likely to accelerate their entry into the profession. Which challenges did you enjoy the most? Students 14 Example of Majors of CyberStart Participants: It is encouraging to see 26% in Hawaii that students who had 12 were most • Computer science • Information security no previous experience 10 17% were able to engage engaged with • Civil engineering • Robotics 8 with the CyberStart 17% 22% • Math • IT 6 cryptography tool and progress 9% • Computer as well as students 4 and Engineering already interested in the 2 9% programming industry and with a basic 0 challenges foundation of knowledge. Linux Web attacks Forensics Cryptography Binary attacks Programming Student Feedback on Career Impact Is there anything you would like to say to the governor sponsoring the program? Had you considered a career in cybersecurity before the program? 100% of

students who “I honestly think this is a fantastic way to get more people thinking about a career in answered “no” cybersecurity . This program does a good job of showing that cybersecurity isn’t boring, that there may be something for everyone to enjoy, and that might put them on the path to a 27% to considering career in the field. Thank you for giving me and the rest of the community an opportunity to a career in participate in the competition and making it as fun and engaging as it is.” Nathan Horiuchi, Honolulu Community College, College Sophomore 73% cybersecurity in the past are

now considering “Thank you for creating a fun site. The puzzles helped me practice some of the things I have further training. learned in school and made me more confident in my abilities. I will share CyberStart with Yes No some teachers and students that I work with to get more people involved. I think this is a great scholarship opportunity that I wish I knew about sooner and I am glad that one of my professors introduced me to this.” The aim of the CyberStart Janice Evans, University of Hawaii, West Oahu, College Sophomore Has the program made you consider further training in cybersecurity? program is to grow Hawaii’s cyber-capable workforce and promote “I am a college sophomore participating in the CyberStart challenge you sponsored. Thanks, cybersecurity as an it really has been a lot of fun, and I’ve learned a number of new skills from it. It’s made me exciting and recognized think of being more active in my clubs and participating in other CTF competitions too. So career. These graphs really, thank you for this opportunity, it’s been great.” support our mission 98% Logan Uyeda, University of Hawaii, Manoa, College Sophomore and present a group of young people who are now on the right path to a Yes No cybersecurity career. “Thank you for giving me the opportunity to participate in this learning experience. It has been not only helpful and educational, but fun as well.” Of the CyberStart paticipants in Hawaii, 73% of players were already interested in a career in cybersecurity before the program. After the program, this number increased. 98% of Megan Lauw, Mililani High School, Grade 12 players are now considering further training. This is encouraging when looking at the future of cybersecurity professionals in the state. In addition, 27% of students had never considered a career in cybersecurity before playing the CyberStart Game. After completing challenges in a variety of cybersecurity disciplines, “I would like to thank the governor who sponsors the CyberStart program, after this past 100% of these students are now considering further training in the area. This is an exciting month I can truly say that my skillset and grasp of a wide amount of the topics covered program result that shows a real step change in reducing the skills gap in Hawaii. and tested in the competition has expanded. The program has given me a platform to jump from and compete in future CTFs. I insist that you all continue to sponsor and improve this competition so that many others like myself can be inspired and feel confident in exploring the deeper realms of cybersecurity .” Nicholas Shaw, Mililani High School, Grade 12 “Thank you so much! I’ve loved learning and solving the challenges and puzzles within this CTF. You’ve inspired me to take more of an interest in cybersecurity.”

Kinaole Mulan Lau, Homeschooled, Grade 12

“Thank you for sponsoring this program! I learned more in the last few weeks about cybersecurity than I have in any other course.”

Darren Kam, Iolani School, Grade 12

“I have no clue as to who else on the island or the state has taken this amazing opportunity but as a message from all of us, thank you. In my high school, there are rarely any opportunities like this where someone like me who knows nothing about cybersecurity gets to learn about it and love everything about it. I hope that an opportunity like this will come again to not only me, but all those who have been waiting for this golden opportunity in their lives.” Carl Antiado, H.P. Baldwin High School, Grade 11

“This program taught me more than an entire semester of college.”

Ryan Nakata, University of Hawaii, Manoa, College Junior

“Thank you for providing this wonderful opportunity to Hawaii residents. Growing up, I often felt a lot of the more interesting/fun events and conferences for a lot of academic areas were on the mainland or were otherwise prohibitively expensive for Hawaii students. Thank you for taking the effort to make this great training available for no cost to Hawaii residents.” Korry Luke, Iolani School, College Junior

Contact Information: E-mail: [email protected] Web: www.sans.org/CyberStartUS